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DETAILED ACTION 
Response to Arguments 

1. Applicants arguments filed 1/8/2004 have been fully considered but they are not 
persuasive. On pages 1-2 of the Response, Applicant argues that Kerr "teaches away from claim 
1 (and claims 1 1 and 16) by generating a single hash key based on the source and destination 
addresses, source and destination ports, and protocol type". Examiner, respectfully, disagrees. 
Kerr teaches generating a hash expression (hash key) from first and second layer 3 information 
and searching a table based on the hash expression to find a matching entry. The claims disclose 
generating a hash expression (hash signature) from first and second layer 3 information and 
searching a table based on the hash expression to find a matching entry. While the claims and 
Kerr may determine the hash expression in different manners, Kerr does recognize that variations 
to the preferred embodiments are possible (col. 10, lines 20-25), As such, Examiner asserts that 
Kerr does not teach away from claims 1,11, and 16. 

2. On page 2 of the Response, Applicant argues that Kerr "neither discloses nor suggests a 
network switch, as claimed, but rather discloses a router ". First, Examiner contends that, as 
broadly defined, a router can be termed a switch since routers determine the proper destination 
port for packet which can be defined as switching (see title of Kerr). Second, even if the term 
"switch" is given a specific definition, such that a router cannot be a switch, the recitation of a 
switch has not been given patentable weight because the recitation occurs in the preamble. A 
preamble is generally not accorded any patentable weight where it merely recites the purpose of 
a process or the intended use of a structure, and where the body of the claim does not depend on 
the preamble for completeness but, instead, the process steps or structural limitations are able to 
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stand alone. See In re Hirao, 535 F.2d 67, 190 USPQ 15 (CCPA 1976) and Kropa v. Robie, 187 
F.2d 150, 152, 88 USPQ 478, 481 (CCPA 1951). 

3. On pages 2-3 of the Response, Applicant argues that the hashing method of Cheriton is 
not combinable with Kerr, and even if it were, the proposed combination would not produce the 
claimed invention. Specifically Applicant argues that Cheriton is directed towards hashing layer 
two addresses rather than layer three addresses, as is done by the claims and Kerr, and therefore 
the proposed combination is not feasible. Examiner, respectfully, disagrees with Applicant's 
assertions. Cheriton discloses that the hashing function is a logical operation performed on the 
address bits of a packet (col. 9, lines 48-60). Since hashing is a mathematical or logical function 
performed on bits in a packet, a hashing function may be performed on any bits in a packet 
regardless of the bits respective layer. Therefore, while Cheriton' s hashing function is directed to 
layer two addresses, one of ordinary skill in the art would recognize that this hash function can 
also be applied to the addresses of other layers. 

4. In addition, Cheriton discloses explicitly that the proposed hashing function can be 
substituted with other hashing functions (col. 9, lines 48-60), By extension, Cheriton implicitly 
discloses that hashing functions are substitutable. This suggests that the proposed hashing 
function can be substituted for another hashing function, such that the hashing function of 
Cheriton could be substituted for the hashing function of Kerr. As such. Examiner maintains that 
the combination of Kerr with Cheriton is proper and that the proposed combination discloses or 
at least suggests all of the limitations of the claim, 

5. On page 3 of the Response, Applicant goes on to argue that the rejection "fails to address 
the claimed feature that the first and second hash keys are generated in response to first and 
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second layer 3 information within the received data packet". Again, Examiner disagrees. The 
base reference in the rejection is Kerr which explicitly discloses generating a hash expression 
using first and second layer 3 information. Kerr is modified with Cheriton which discloses how 
to generate a hash signature using first and second hash keys generated from first and second 
layer information. Thus, the proposed combination suggests that the first and second hash keys 
are generated in response to first and second layer 3 information within the received data packet. 

6. Applicant additionally argues on page 3 of the Response that "the assertion of having a 
hash key that is 'fast and easy to implement' is subjective, arbitrary and without foundation". 
Examiner, respectfully, disagrees. The purpose of hash functions is to increase the speed of a 
table look-up. As such, it is implicit that Cheriton chooses to use a hash function, at least in part, 
based upon the hash functions ability to increase look-up speed. In addition, it is implicit that 
Cheriton chooses a hash function that is easy to implement since ease of implementation will 
increase the speed of the hash function. With simpler logic (easier implementation) the hash 
function will not waste time performing processing. Given general knowledge about the use of 
hash functions and the fact that Cheriton is implementing the hash function for a reason. 
Examiner maintains that the assertion that the key is fast and easy to implement is not 
"subjective, arbitrary and without foundation". 

7. Given the above arguments. Examiner maintains the rejections of claims 1-3 and 5-8. 

8. On page 4 of the Response, with regards to claim 9, Applicant argues that it is "believed 
claim 9 is allowable in view of its dependency from claims 1 and 7". Since Examiner maintains 
that claims 1 and 7 are not allowable. Examiner also maintains the rejection of claim 9. 



Application/Control Number: 09/496,212 Page 5 

Art Unit: 2665 

9. On pages 4-6 of the Response, with regards to claim 10, Applicant argues that the 
Examiner "takes an unreasonable interpretation of the claim language 'an identifier specifying 
the selected layer 3 switching entry'" by "asserting that the claimed term 'could be anything , 
including a packet, a header of the packet, or the hash values, that could be used to identify the 
switching entry." In response to applicant's argument that the references fail to show certain 
features of applicant's invention, it is noted that the features upon which applicant relies (i.e., the 
identifier specifying the selected layer 3 switching entry is a memory address or index thereof to 
the selected layer 3 switching entry) are not recited in the rejected claim(s). Although the claims 
are interpreted in light of the specification, limitations fi-om the specification are not read into the 
claims. See In re Van Geuns, 988 F.2d 1 181, 26 USPQ2d 1057 (Fed. Cir. 1993). Applicant 
seems to argue that since the identifier is defined by the specification that the only "broadest 
reasonable interpretation" would be the definition used by the specification. However, since 
limitations from the specification are not read into the claims, the claim language should be 
given the broadest reasonable interpretation in the context of the claims. As such, Examiner 
maintains that interpreting the identifier to be anything that could be used to identify the 
switching entry, such as a packet, a header of the packet, or hash values, is proper. Therefore, 
Examiner maintains the rejection of claim 10. 

10, On pages 6-7 of the Response, Applicant argues, with respect to claims 11,14 and 1 5, 
that that Kerr "does not disclose an integrated network switch, as claimed". Examiner contends 
that, as broadly defined, a router can be termed a switch since routers determine the proper 
destination port for packet which can be defined as switching (see title of Kerr). In addition, in 
response to applicant's argument that the references fail to show certain features of applicant's 
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invention, it is noted that the features upon which applicant reHes (i.e., the term "integrated" 
refers to integration on a single chip and that switches are distinct from routers) are not recited in 
the rejected claim(s). Although the claims are interpreted in light of the specification, limitations 
from the specification are not read into the claims. See In re Van Geuns, 988 F.2d 1 181, 26 
USPQ2d 1057 (Fed. Cir. 1993). Examiner respectfiilly asserts that Kerr discloses an integrated 
network switch since the node of Kerr performs "network flow switching" as an integrated unit 
where integrated is defined as a "unified whole". Since, as broadly defined, Kerr discloses an 
integrated network switch, Examiner maintains the rejections of the claims. 
1 1 . Applicant additionally argues on pages 6-7 of the Response that Zaumen does not 
discloses nor suggest "generating a packet signature by a network port based on performing the 
prescribed hash operation on the first and second portion of the layer 3 information " since 
Zaumen specifies that "any packet processing is performed centrally , and not at the network 
port". Examiner, respectfully, disagrees with Applicant's interpretation of Zaumen. Applicant 
asserts that since Zaumen discloses that "a newly arrived packet at the subsystem 110 will be 
processed . . .in the switching element 1 1 1 which identifies the packet as a member of one or 
several predefined packet types" that Zaumen discloses that the packet processing is performed 
centrally. However, Zaumen explicitly discloses that the forwarding memory architecture seen in 
Fig. 1, which is the figure referenced by the passage cited by Applicant, is a distributed 
architecture (col. 10, lines 2-5). Hence, Zaumen explicitly teaches that packet processing is not 
performed centrally but rather in a distributed manner. As such, Examiner maintains the 
rejections of claims 11, 14, and 15. 
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12. On page 7 of the Response, with regards to claims 12, 13, and 16-18, Applicant argues 
that Cheriton is not combinable with Kerr and Zaumen for the reasons given above. Examiner 
maintains, for the aforementioned reasons, that Cheriton is combinable with Kerr and Zaumen 
and that this combination discloses all of the limitations of the claims. Thus, Examiner maintains 
the rejection of claims 12, 13, and 16-18. 

13. On page 8 of the Response, with regards to claim 19, Applicant argues that "this 
dependent claim is allowable in view of the foregoing." Examiner, respectfully, disagrees. Given 
the above arguments. Examiner maintains the rejection of claim 19. 

14. In view of the aforementioned arguments. Examiner maintains the rejections of claims 1- 
3 and 5-19. In order to overcome these rejections. Examiner suggests that Applicant include 
limitations in the claims which clearly distinguish the claims from the prior art. 



15. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

16. Claims 1-3 and 5-8 are rejected under 35 U.S.C. 103(a) as being unpatentable over Kerr 
et al (USPN 6,243,667) in view of Cheriton et al (USPN 6,091,725). 

17. Regarding claim 1, Kerr discloses a method in a network switch of searching for a 
selected layer 3 switching entry for a received data packet (col. 1, lines 48-61; col. 2, line 38-col. 
3, line 20; col. 4, lines 20-34; and claim 1), the method comprising: generating hash keys 
according to a prescribed hash function in response to first and second layer 3 information within 
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the received data packet (col. 1, lines 48-61; col. 2, line 38-col. 3, line 20; col. 3, line 40-col. 4, 
line 11; and claim 1); and searching a table, configured for storing layer 3 hash keys that index 
respective layer 3 switching entries according to the prescribed hash function, for the selected 
layer 3 switching entry based on a match between the corresponding layer 3 hash key and the 
hash key for the received data packet (col. 1, lines 48-61; col. 2, line 38-col 3, line 20; col. 3, 
line 40-col. 4, line 1 1; and claim 1). Kerr does not expressly disclose generating first and second 
hash keys according to a prescribed hash function in response to first and second information 
within the received data packet, respectively, or combining the first and second hash keys 
according to a prescribed combination into a signature for the received data packet. Cheriton 
discloses, in a system for identifying switching information for flows, generating first and second 
hash keys according to a prescribed hash function in response to first and second information 
within the received data packet, respectively, and combining the first and second hash keys 
according to a prescribed combination into a signature for the received data packet in order to 
have a hash function that is fast and easy to implement (Fig. 7 and col. 9, lines 48-60). It would 
have been obvious to one of ordinary skill in the art at the time of the invention to generate first 
and second hash keys according to a prescribed hash function in response to first and second 
information within the received data packet, respectively and combine the first and second hash 
keys according to a prescribed combination into a signature for the received data packet in order 
to have a hash key that is fast and easy to implement. 

18. Regarding claim 2, referring to claim 1, Kerr in view of Cheriton discloses that the 
received data packet includes an Internet Protocol (BP) header, the generating step including 
detecting the first and second layer 3 information from the IP header as the data packet is 
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received by a corresponding network switch port (Kerr: col. 1, lines 48-61; col. 2, line 38-col. 3, 
line 20; col. 3, line 40-col. 4, line 11; and claim 1). 

19. Regarding claim 3, referring to claim 2, Kerr in view of Cheriton discloses that the 
detecting step includes selecting at least two of an IP source address, an IP destination address, a 
Transmission Control Protocol (TCP) source port, a TCP destination port, a User Datagram 
Protocol (UDP) source port, and a UDP destination port as the first and second layer 3 
information from the IP header based on elements of each of the layer 3 switching entries used to 
generate the corresponding layer 3 signature (Kerr; col. 1, lines 48-61; col. 2, line 38-col. 3, line 
20; col. 3, line 40-col. 4, line 11; and claim 1 and Cheriton: Fig. 7 and col. 9, lines 48-60). 

20. Regarding claim 5, referring to claim 1, Kerr in view of Cheriton discloses verifying 
whether the selected layer 3 switching entry matches the received data packet (Kerr: col. 6, lines 
32-57). 

21 . Regarding claim 6, referring to claim 5, Kerr in view of Cheriton suggests that the 
verifying step includes: fetching the first and second layer 3 information fi-om the selected layer 
3 switching entry; and determining whether the first and second layer 3 information fi*om the 
selected layer 3, switching entry matches the first and second layer 3 information within the 
received data packet (Kerr: col. 6, lines 32-57). Kerr in view of Cheriton discloses hashing 
according to buckets and then identifying (verifying) which entry within a bucket is related to the 
received packet (Kerr: col. 6, lines 32-49). Examiner takes official notice that it is well known in 
the art to verify a hashing entry by a comparison of the values used to generate the hash key in 
the received packet and the entry. 
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22. Regarding claim 7, referring to claim 1, Kerr in view of Cheriton discloses detecting a 
group of the layer 3 switching entries, each having a corresponding layer 3 signature that 
matches the signature for the received data packet; and verifying one entry from the group of the 
layer 3 switching entries matches the received data packet (Kerr: col. 6, lines 32-57). 

23. Regarding claim 8, referring to claim 7, Kerr in view of Cheriton suggests that the 
verifying step includes: fetching the first and second layer 3 information for each of the entries of 
the group of layer 3 switching entries; and identifying the one entry having the corresponding 
first and second layer 3 information that matches the first and second layer 3 information within 
the received data packet (Kerr: col. 6, lines 32-57). Kerr in view of Cheriton discloses hashing 
according to buckets and then identifying which entry within a bucket is related to the received 
packet (Kerr: col. 6, lines 32-49). Examiner takes official notice that it is well known in the art to 
verify a hashing entry by a comparison of the values used to generate the hash key in the 
received packet and the entry. 

24. Claim 9 is rejected under 35 U.S.C, 103(a) as being unpatentable over Kerr et al (USPN 
6,243,667) in view of Cheriton et al (USPN 6,091,725) as applied to claim 7 above, and further 
in view of Bellenger (USPN 5,949,786) in further view of Rostoker et al (USPN 5,640,399), 

25. Regarding claim 9, referring to claim 7, Kerr in view of Cheriton possibly does not 
expressly disclose that the network switch is an integrated circuit chip, the searching step 
including searching a signature table located on the integrated circuit chip, and the fetching step 
including accessing the first and second layer 3 information from a policy table in a memory 
external to the integrated circuit chip. Bellenger discloses, for a flow based network switch, 
implementing the network switch as an integrated circuit chip, the searching step including 
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searching a table located on the integrated circuit chip, and the fetching step including accessing 
the information from a policy table in a memory external to the integrated circuit chip (Fig. 2 and 
col. 4, line 47-col. 5, line 15). Rostoker discloses that building a switch (router) as a single chip 
rather than multiple chips resuhs in faster switching, lower costs, and smaller size for the 
switching unit (col. 1, lines 52-67). It would have been obvious to one of ordinary skill in the art 
at the time of the invention to have the network switch be an integrated circuit chip, the 
searching step include searching a signature table located on the integrated circuit chip, and the 
fetching step include accessing the first and second layer 3 information from a policy table in a 
memory external to the integrated circuit chip in order to have faster switching, lower costs, and 
a smaller switching unit. 

26. Claim 10 is rejected under 35 U.S.C. 103(a) as being unpatentable over Kerr et al (USPN 
6,243,667) in view of Cheriton et al (USPN 6,091,725) as applied to claim 1 above, and further 
in view of Zaumen et al (USPN 6,118,760). 

27. Regarding claim 10, referring to claim 1, Kerr in view of Cheriton does not expressly 
disclose forwarding an identifier specifying the selected layer 3 switching entry from a network 
switch port, having received the received data packet, to layer 3 switching logic within the 
network switch. Zaumen discloses, in a network element forwarding memory, forwarding an 
identifier specifying the selected layer 3 switching entry from a network switch port, having 
received the received data packet, to layer 3 switching logic within the network switch in order 
to have the network switching logic within the network switch determine switching decisions if 
the port does not contain an entry for the packet (Fig. 1 and col. 5, line 15-col. 6, line 16, esp. 
col. 5, line 49-col. 6, line 14) where, as broadly defined, an "identifier specifying the selected 
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layer 3 switching entry" could be anything, including a packet, a header of the packet, or the 
hash values, that could be used to identify the switching entry. It would have been obvious to one 
of ordinary skill in the art at the time of the invention to forward an identifier specifying the 
selected layer 3 switching entry from a network switch port, having received the received data 
packet, to layer 3 switching logic within the network switch in order to have the network 
switching logic within the network switch determine switching decisions if the port does not 
contain an entry for the packet. 

28. Claims 1 1, 14, and 15 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kerr et al (USPN 6,243,667) in view of Zaumen et al (USPN 6,1 18,760). 

29. Regarding claim 1 1, Kerr discloses a method of identifying a layer 3 switching decision 
within an integrated network switch having a plurality of network ports and switching logic (col. 
1, lines 48-61; col. 2, line 38-col. 3, Hne 20; col. 4, lines 20-34; and claim 1), the method 
including: storing, in a first table, layer 3 switching entries that identify data packet types based 
on layer 3 information, respectively, each layer 3 switching entry identifying a corresponding 
layer 3 switching decision to be performed by the integrated network switch (col. 1, lines 48-61; 
col. 2, line 38-col. 3, line 20; col. 3, line 40-col. 4, line 1 1; and claim 1); generating an entry 
signature (hash key) for each of the layer 3 switching entries based on a prescribed hash 
operation performed on first and second portions of the corresponding layer 3 information (col. 
1, lines 48-61; col. 2, line 38-col. 3, line 20; col. 3, line 40-col, 4, line 1 1; and claim 1); 
generating a packet signature (hash key) for a data packet based on performing the prescribed 
hash operation on the first and second portions of the layer 3 information in the corresponding 
received data packet (col. 1, lines 48-61; col. 2, line 38-col. 3, line 20; col. 3, line 40-col. 4, line 
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11; and claim 1); and identifying one of the layer 3 switching entries for switching of the 
received data packet based on detecting a match between the packet signature and the 
corresponding entry signature (col. 1, lines 48-61; col. 2, line 38-col. 3, line 20; col. 3, line 40- 
col. 4, line 11; and claim 1). Kerr does not expressly disclose that a network switch port performs 
the generating and identifying steps. Zaumen teaches, in a network element forwarding memory, 
having a network switch port perform the generating and identifying steps (Fig. 1 and col. 5, line 
15-col. 6, line 16, esp. col. 5, line 49-col. 6, line 14) where it is implicit that this architecture 
allows for distributed routing, such that a central table is not required for all table look-ups. It 
would have been obvious to one of ordinary skill in the art at the time of the invention to have a 
network switch port performs the generating and identifying steps in order to use many smaller, 
slower tables instead of a single, high-speed table. 

30. Regarding claim 14, referring to claim 1 1, Kerr in view of Zaumen discloses that the step 
of identifying one of the layer 3 switching entries includes: searching a signature table within the 
integrated network switch for one of the entry signatures matching the packet signature; 
retrieving from the signature table an address location of the one layer 3 switching entry 
corresponding to the matched entry signature; and accessing the one layer 3 switching entry from 
an external memory based on the retrieved address location (Kerr: col. 1, lines 48-61; col. 2, line 
38-col. 3, line 20; col. 3, line 40-col. 4, line 11; col. 6, line 32-55; and claim 1) where the 
signature table is the bucket and the external memory is the entries linked within the bucket. 

3 1 . Regarding claim 1 5, referring to claim 14, Kerr in view of Zaumen discloses that the step 
of identifying the one layer 3 switching entry includes verifying that the one layer 3 switching 
entry matches the received data packet (Kerr: col. 6, lines 32-57), 
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32. Claims 12, 13, and 16-18 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kerr et al (USPN 6,243,667) in view of Zaumen et al (USPN 6,1 18,760) in further view of 
Cheriton et al (USPN 6,091,725). 

33. Regarding claim 12, referring to claim 1 1, Kerr in view of Zaumen discloses that the step 
of generating an entry signature includes: selecting at least two of an IP source address, an IP 
destination address, a Transmission Control Protocol (TCP) source port, a TCP destination port, 
a User Datagram Protocol (UDP) source port, and a UDP destination port as the first and second 
portions of the corresponding layer 3 information (Kerr: col. 1, lines 48-61; col. 2, line 38-col. 3, 
line 20; col. 3, line 40-col. 4, line 11; and claim 1). Kerr in view of Zaumen does not disclose 
generating first and second hash keys for the first and second portions of the corresponding layer 
3 information in the layer 3 switching entry based on the prescribed hash operation; and 
combining the first and second hash keys to form the entry signature. Cheriton discloses, in a 
system for identifying switching information for flows, generating first and second hash keys 
according to a prescribed hash function in response to first and second information within the 
received data packet, respectively and combining the first and second hash keys according to a 
prescribed combination into a signature for the received data packet in order to have a hash key 
that is fast and easy to implement (Fig, 7 and col. 9, lines 48-60). It would have been obvious to 
one of ordinary skill in the art at the time of the invention to generate first and second hash keys 
according to a prescribed hash function in response to first and second information within the 
received data packet, respectively and combine the first and second hash keys according to a 
prescribed combination into a signature for the received data packet in order to have a hash key 
that is fast and easy to implement. 
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34. Regarding claim 13, referring to claim 12, Kerr in view of Zaumen in view of Cheriton 
discloses that the step of generating a packet signature includes: selecting the at least two of an 
IP source address, an IP destination address, a Transmission Control Protocol (TCP) source port, 
a TCP destination port, a User Datagram Protocol (LTDP) source port, and a UDP destination 
port as the first and second portions of the corresponding layer 3 information in the received data 
packet; generating third and fourth hash keys for the first and second portions of the 
corresponding layer 3 information in the received data packet based on the prescribed hash 
operation; and combining the third and fourth keys to form the packet signature (Kerr: col 1, 
lines 48-61; coL 2, line 38-col. 3, line 20; col. 3, line 40-col. 4, line 11; and claim 1 and Cheriton: 
Fig. 7 and col. 9, lines 48-60). 

35. Regarding claim 16, Kerr discloses an integrated network switch configured for 
executing layer 3 switching decisions (col. 1, lines 48-61; col. 2, line 38-col. 3, line 20; col. 4, 
lines 20-34; and claim 1), comprising: an index table that includes addresses of layer 3 switching 
entries that identify respective data packet types based on layer 3 information, the index table 
also including for each address entry a corresponding entry signature representing a combination 
of selected first and second portions of the corresponding layer 3 information hashed according 
to a prescribed hashing operation (col. 1, lines 48-61; col. 2, line 38-col. 3, line 20; col. 3, Hne 
40-coI. 4, line 1 1; and claim 1); a plurality of network switch ports (col. 1, lines 48-61; col. 2, 
line 38-col. 3, line 20; col. 3, line 40-col. 4, line 1 1; and claim 1); a fi*ame identifier configured 
for obtaining the first and second portions of layer 3 information within a data packet being 
received by the network switch port (col. 1, lines 48-61; col 2, line 38-col. 3, line 20; col. 3, line 
40-col 4, line 1 1; and claim 1); a flow module configured for identifying one of the layer 3 
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switching entries for execution of the corresponding layer 3 switching decision for the data 
packet based on a determined correlation between the packet hash and the corresponding entry 
hash (col. 1, Hnes 48-61; col. 2, line 38-col. 3, line 20; col. 3, Hne 40-col. 4, Hne 11; and claim 
1); and layer 3 switching logic for executing the layer 3 switching decision for the data packet 
based on the corresponding identified one layer 3 switching entry (col. 1, lines 48-61; col. 2, line 
38-col. 3, line 20; col. 3, line 40-col. 4, line 1 1; and claim 1). Kerr does not expressly disclose 
that each port contains a frame identifier and a flow module. Zaumen teaches, in a network 
element forwarding memory, having a network switch port contain a frame identifier and a flow 
module (Fig. 1 and col. 5, Hne 15-col. 6, line 16, esp. col. 5, line 49-col. 6, line 14) where it is 
implicit that this architecture allows for distributed routing, such that a central table is not 
required for all table look-ups. It would have been obvious to one of ordinary skill in the art at 
the time of the invention to have a network switch port contain a frame identifier and a flow 
module in order to use many smaller, slower tables instead of a single, high-speed table. Kerr in 
view of Zaumen does not disclose that the flow module is configured for generating a packet 
signature by generating first and second hash keys for the first and second portions from the data 
packet based on a prescribed hash operation. Cheriton discloses, in a system for identifying 
switching information for flows, generating first and second hash keys according to a prescribed 
hash function in response to first and second information within the received data packet, 
respectively and combining the first and second hash keys according to a prescribed combination 
into a signature for the received data packet in order to have a hash key that is fast and easy to 
implement (Fig. 7 and col. 9, lines 48-60). It would have been obvious to one of ordinary skill in 
the art at the time of the invention to have the flow module be configured for generating a packet 
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signature by generating first and second hash keys for the first and second portions fi-om the data 
packet based on a prescribed hash operation in order to have a hash key that is fast and easy to 
implement. 

36. Regarding claim 17, referring to claim 16, Kerr in view of Zaumen in view of Cheriton 
discloses that the flow module, in response to determining the correlation between the packet 
signature and the entry signature, fetches selected portions of the layer 3 information fi-om the 
one layer 3 switching entry for verification that the one layer 3 switching entry matches the data 
packet (Kerr: col. 6, lines 32-57). 

37. Regarding claim 18, referring to claim 16, Kerr in view of Zaumen in view of Cheriton 
discloses that the frame identifier selects at least two of an IP source address, and IP destination 
address, a Transmission Control Protocol (TCP) source port, a TCP destination port, a User 
Datagram Protocol (LTDP) source port, and a UDP destination port as the first and second 
portions of layer 3 information within the data packet (Kerr: col. 1, lines 48-61; col. 2, line 38- 
col. 3, line 20; col. 3, Hne 40-col. 4, line 11; and claim 1). 

38. Claim 19 is rejected under 35 U.S.C. 103(a) as being unpatentable over Kerr et al (USPN 
6,243,667) in view of Zaumen et al (USPN 6,1 18,760) in further view of Cheriton et al (USPN 
6,091,725) as applied to claim 16 above, and further in view of Bellenger (USPN 5,949,786) in 
further view of Rostoker et al (USPN 5,640,399), 

39. Regarding claim 19, referring to claim 16, Kerr in view of Zaumen in view of Cheriton 
does not expressly disclose an external memory interface configured for providing access by the 
flow module to the one layer 3 switching entry, stored in a memory external to the integrated 
network switch, based on the corresponding address entry. Bellenger discloses, for a flow based 
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network switch, implementing the network switch as an integrated circuit chip, where an external 
memory interface is configured for providing access by the flow module to a switching entry 
(Fig. 2 and col. 4, line 47-col. 5, line 15). Rostoker discloses that building a switch (router) as a 
single chip rather than multiple chips results in faster switching, lower costs, and smaller size for 
the switching unit (col. 1, lines 52-67). It would have been obvious to one of ordinary skill in the 
art at the time of the invention to have the network switch be an integrated circuit chip and to 
have an external memory interface configured for providing access by the flow module to the 
one layer 3 switching entry, stored in a memory external to the integrated network switch, based 
on the corresponding address entry in order to have faster switching, lower costs, and a smaller 
switching unit. 

Conclusion 

40. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. Chang et al (USPN 5,633,858) see col. 1, line 57-col 2, line 10 which discloses 
verifying if a hash entry matches a received data packet in order to ensure that the packet is 
processed properly. 

41 . THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1, 136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS fi*om the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
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CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Daniel J. Ryman whose telephone number is (703)305-6970. The 
examiner can normally be reached on Mon.-Fri. 7:00-5:00 with every other Friday off 

If attempts to reach the examiner by telephone are unsuccessfiil, the examiner's 
supervisor, Huy Vu can be reached on (703)308-6602. The fax phone number for the 
organization where this application or proceeding is assigned is (703)308-6743. 

Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the receptionist whose telephone number is (703)305-3900. 



Daniel J. Ryman 
Examiner 
Art Unit 2665 



Daniel J. Ryman 
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